Question

Contoso stores documents containing customer credit card numbers in SharePoint Online and OneDrive. The compliance team reports that some of these files have been shared with external guests via anonymous sharing links. You must create a single Microsoft Purview DLP policy that automatically blocks external users from accessing files that contain credit card data, while still allowing internal employees to open and edit those files. What should you configure in the DLP policy?

Accepted Answer

Set the locations to SharePoint sites and OneDrive accounts, use the Credit Card Number sensitive information type as the condition, and add the action 'Restrict access or encrypt the content in Microsoft 365 locations' set to 'Block only people who were given access to the content through the "Anyone with the link" option and people outside your organization'.

Answer

Set the locations to Exchange email, use the Credit Card Number sensitive information type, and add the action to block the message with a notification to the sender.

Answer

Set the locations to SharePoint sites and OneDrive accounts, use the Credit Card Number sensitive information type, and add the action 'Restrict access or encrypt the content in Microsoft 365 locations' set to 'Block everyone'.

Answer

Set the locations to Devices, use the Credit Card Number sensitive information type, and configure an Endpoint DLP restriction to block copying the files to network shares.